Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(712)

Side by Side Diff: appengine/config_service/README.md

Issue 1224913002: luci-config: fine-grained acls (Closed) Base URL: git@github.com:luci/luci-py.git@master
Patch Set: mentioned in doc that trusted services also have access Created 5 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | appengine/config_service/acl.py » ('j') | appengine/config_service/acl.py » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 # Configuration service 1 # Configuration service
2 2
3 - Stores and imports config files from repositories, such as Gitiles. 3 - Stores and imports config files from repositories, such as Gitiles.
4 - Provides read-only access to config files and encapsulates their location. 4 - Provides read-only access to config files and encapsulates their location.
5 - Stores a registry of projects that use LUCI services. 5 - Stores a registry of projects that use LUCI services.
6 6
7 7
8 ## Quick examples 8 ## Quick examples
9 9
10 ### Service config example 10 ### Service config example
(...skipping 72 matching lines...) Expand 10 before | Expand all | Expand 10 after
83 Examples: 83 Examples:
84 84
85 - list of builds that have to pass for a CL to be committed. 85 - list of builds that have to pass for a CL to be committed.
86 - list of builder names that can close the tree if failed. 86 - list of builder names that can close the tree if failed.
87 - Code review info: type (rietveld, gerrit, etc), URL and 87 - Code review info: type (rietveld, gerrit, etc), URL and
88 codereview-specific details. 88 codereview-specific details.
89 89
90 Ref configs live in `projects/<project_id>/<ref_name>` config 90 Ref configs live in `projects/<project_id>/<ref_name>` config
91 set, where `<ref_name>` always starts with `refs/`. 91 set, where `<ref_name>` always starts with `refs/`.
92 92
93 ## Access control
94
95 Service configs are accessible to a group defined in service/luci-config:acl.cfg
96 and a GAE app with the same id, e.g. x.appspot.com has access to `services/x`.
Sergiy Byelozyorov 2015/07/07 22:48:07 can we make this configurable please? e.g. cq serv
97
98 Projects define access to their configs in projects/foo:project.cfg. See
99 [access field in ProjectCfg message](proto/project_config.proto).
93 100
94 ## GAE component 101 ## GAE component
95 102
96 config component can be used by a GAE app to read configs. 103 config component can be used by a GAE app to read configs.
97 104
98 105
99 ## Config import 106 ## Config import
100 107
101 Configs are continuously imported from external sources to the datastore by 108 Configs are continuously imported from external sources to the datastore by
102 config service backend. 109 config service backend.
103 [Read more](https://github.com/luci/luci-py/wiki/Config-service:-config-import) 110 [Read more](https://github.com/luci/luci-py/wiki/Config-service:-config-import)
OLDNEW
« no previous file with comments | « no previous file | appengine/config_service/acl.py » ('j') | appengine/config_service/acl.py » ('J')

Powered by Google App Engine
This is Rietveld 408576698